Re: Proxy question

On 4/26/07, Dave Shield <[email protected]> wrote:
> On 26/04/07, Byron Schlemmer <[email protected]> wrote:
> > I've got the following line in my "proxy" servers snmpd.conf file :
> >
> > proxy -Cn remoteserver1 -v 1 -c public remoteserver1 .1.3
> >
> > Should I be able to do :
> >
> > snmpwalk -v 1 -c public -n remoteserver1 proxyserver system
>
> No.
> The '-n' flag to specify a non-default context is only applicable to
> SNMPv3.   The community-based versions (v1 & v2c) use the
> community string for this purpose.
>
> Try
>     snmpwalk -v 1 -c remoteserver1 proxyserver system
>
>
> Note that the '-c {name}' value in the snmpwalk request
> should match the '-Cn {name}' value in the proxy directive.
>
> This does not have to be the same as the community name
> used for communicating between the proxy and remote
> servers  ('-n {name}' in the proxy directive).
>   But the remote server must be configured to accept requests
> from the proxy server using this "internal" community name
> ("public" in the example above).

Hi Dave,

Thanks for clearing that up.

Should the proxy directive work with version 5.1?

Reason being I've got the following snmpd.conf on remoteserver 1 :

rocommunity public
rwcommunity private

Then on proxyserver :

rocommunity public
rwcommunity private

proxy -Cn remoteserver1 -v 1 -c public remoteserver1 .1.3

Then issuing "snmpwalk -v 1 -c remoteserver1 proxyserver system" from
a third host I see the following in the logs :

mibII/vacm_vars: vacm_in_view: ver=0, community=remoteserver1
mibII/vacm_vars: vacm_in_view: No security name found

Now upgrading to 5.4 and following the advice here :

http://www.freesnmp.com/net-snmp/faqs/index.html#v1proxy

Does work. However this means upgrading to 5.4, which I'd like to
avoid if possible. (It's a RHEL4 system - a few dependencies that I'd
have to fix as a result).

Unfortunately the advice at the URL above doesn't work on 5.1 as the
com2sec directive doesn't seem to understand -Cn

Is there anything you could recommend or am I SOL?

Many thanks,

-- 

        - Byron

-------------------------------------------------------------------------
This SF.net email is sponsored by DB2 Express
Download DB2 Express C - the FREE version of DB2 express and take
control of your XML. No limits. Just data. Click to get it now.
http://sourceforge.net/powerbar/db2/
_______________________________________________
Net-snmp-users mailing list
[email protected]
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users